3218 matches found
File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode
The plugin does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users. 1. Add the following shortcode to a...
File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode
The plugin does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users. PoC 1. Add the following shortcode to ...
Design/Logic Flaw
eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...
PT-2023-22353 · Extplorer · Extplorer
Name of the Vulnerable Software and Affected Versions: eXtplorer version 2.1.15 Description: The issue allows for insecure permissions, specifically through the file upload feature in the file manager. This vulnerability enables the upload of zip files that contain PHP pages, which can lead to...
CVE-2023-29657
CVE-2023-29657 affects eXtplorer 2.1.15. The vulnerability arises from insecure permissions in the file manager’s upload feature, allowing a ZIP containing PHP pages to be uploaded and executed, leading to arbitrary code execution. Impact is described as high (C: High, I: High, A: High) with netw...
kodbox 安全漏洞
kodbox is a network file manager. A security vulnerability exists in kodbox versions 1.2.x through 1.3.7, which stems from the presence of sensitive information disclosure issues...
CVE-2023-29657
eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...
kodbox 跨站脚本漏洞
kodbox is a web file manager. A security vulnerability exists in kodbox 1.37 and earlier versions, which is rooted in a vulnerability to cross-site scripting XSS attacks via debugging messages...
Directory Traversal
contao/contao and contao/core-bundle are vulnerable to Directory Traversal. The vulnerability exists in DCFolder.php which allows an attacker to list files outside the document root in the file manager...
PHPFusion 9.10.30 Cross Site Scripting
Exploit Title: PHPFusion 9.10.30 - Stored Cross-Site Scripting XSS Application: PHPFusion Version: 9.10.30 Bugs: XSS Technology: PHP Vendor URL: https://www.php-fusion.co.uk/home.php Software Link: https://sourceforge.net/projects/php-fusion/ Date of found: 28-04-2023 Author: Mirabbas Ağalarov...
PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS)
Exploit Title: PHPFusion 9.10.30 - Stored Cross-Site Scripting XSS Application: PHPFusion Version: 9.10.30 Bugs: XSS Technology: PHP Vendor URL: https://www.php-fusion.co.uk/home.php Software Link: https://sourceforge.net/projects/php-fusion/ Date of found: 28-04-2023 Author: Mirabbas Ağalarov...
PHPFusion 9.10.30 - Stored Cross-Site Scripting Vulnerability
Exploit Title: PHPFusion 9.10.30 - Stored Cross-Site Scripting XSS Application: PHPFusion Version: 9.10.30 Bugs: XSS Technology: PHP Vendor URL: https://www.php-fusion.co.uk/home.php Software Link: https://sourceforge.net/projects/php-fusion/ Date of found: 28-04-2023 Author: Mirabbas Ağalarov...
WordPress Bit File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection
Software Bit File Manager Type Plugin Vulnerable versions = 5.2.7 Fixed in 6.0.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2022-47599 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 73c858fcfca7 Credits rezaduty Required privilege Administrator...
GHSA-FP7Q-XHHW-6RJ3 Path traversal vulnerability in the file manager
Impact Authenticated users in the back end can list files outside the document root in the file manager. Patches Update to Contao 4.9.40, 4.13.21 or 5.1.4. Workarounds None. References https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager For more information If you ha...
Path traversal vulnerability in the file manager
Impact Authenticated users in the back end can list files outside the document root in the file manager. Patches Update to Contao 4.9.40, 4.13.21 or 5.1.4. Workarounds None. References https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager For more information If you ha...
CVE-2023-29200
Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...
Design/Logic Flaw
Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...
CVE-2023-29200 contao/core-bundle has path traversal vulnerability in the file manager
Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...
CVE-2023-29200 contao/core-bundle has path traversal vulnerability in the file manager
Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...
